Simon Willison’s Weblog

Twitter pranksters derail GPT-3 bot with newly discovered “prompt injection” hack. I’m quoted in this Ars Technica article about prompt injection and the Remoteli.io Twitter bot.

Posted 16th September 2022 at 6:33 pm

Recent articles

OpenAI's new open weight (Apache 2) models are really good - 5th August 2025
ChatGPT agent's user-agent - 4th August 2025
The ChatGPT sharing dialog demonstrates how difficult it is to design privacy preferences - 3rd August 2025

security 532 twitter 160 gpt-3 67 openai 325 prompt-engineering 155 prompt-injection 111 generative-ai 1305 llms 1283 press-quotes 19

Monthly briefing

Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.

Pay me to send you less!

Sponsor & subscribe